diff --git a/docs/FAQ.xml b/docs/FAQ.xml index 67ae30230..8bb37055b 100644 --- a/docs/FAQ.xml +++ b/docs/FAQ.xml @@ -2000,7 +2000,11 @@ Creating input Chains... Beginning with Shorewall 4.4, when the Shorewall tarballs are installed on a Debian (or derivative) system, the /etc/init.d/shorewall file is the same as would be - installed by the .deb. + installed by the .deb. The behavior of /etc/init.d/shorewall + stop is controlled by the setting of SAFESTOP in + /etc/default/shorewall. When set to 0 (the + default), the firewall is cleared; when set to 1, the firewall is placed + in a safe state.